Recent Activity

Question

Been having trouble with my primary password and trying to fix that situation with answers from you. In my searching around I found the recent activity log. The United States is me, but all the foreign successful logins such as Mexico, Syria, Ukraine and such certainly aren't and there are tons of them. If I have been hacked and people are signing into my account what the hell do I do?

---

Moved from: Microsoft Security | Microsoft Authenticator

Answer 1

1

On your account activity if you are seeing login attempts, that indicates some bot is trying to hack your account, are any of those login attempts indicated as successful or are they unsuccessful?

Also on your account online, check your profile details, do you only see your own Email address listed there, and no Email address you do not recognize?

2

In the meantime, you need to ensure you have a long and strong password set on your account and also enable 2 factor authentication on your account as an extra layer of security.

https://support.microsoft.com/en-us/account-billing/how-to-use-two-step-verification-with-your-microsoft-account-c7910146-672f-01e9-50a0-93b4585e7eb4

Answer 2

If you are seeing successful logins from locations that you do not recognize, it is crucial to take immediate action to secure your account. Here are the steps you should follow:

1. Change Your Password: Immediately change your password to a strong, unique one that you have not used before. Ensure it includes a mix of letters, numbers, and special characters.
2. Enable Multi-Factor Authentication (MFA): If you haven't already, enable MFA on your account. This adds an extra layer of security by requiring a second form of verification when signing in.
3. Review Account Activity: Check your account activity log for any unauthorized actions or changes. Look for any unfamiliar devices or locations that have accessed your account.
4. Sign Out of All Sessions: If your service allows it, sign out of all active sessions to prevent unauthorized access.
5. Check for Account Recovery Options: Ensure that your account recovery options (like email and phone number) are up to date and secure.
6. Contact Support: If you suspect that your account has been compromised, contact the support team of the service for further assistance and to report the unauthorized access.
7. Monitor Your Accounts: Keep an eye on your account for any further suspicious activity and consider monitoring your other accounts for similar issues.

Taking these steps can help you regain control of your account and protect it from further unauthorized access.

---

References:

• How to investigate anomaly detection alerts
• Alert classification for suspicious IP addresses related to password spray attacks